It's probably not wise that they release malicious binaries or details about foreign hacking infrastructure to the general public. That doesn't leave the with much direct evidence they can release at this point. Remember, it is an ongoing investigation and will be for quite some time considering the scope and severity of the breach.
